TikTok · Report #964467
Bypass SMS verification to delete TikTok account
Validstatus
lowseverity
64upvotes
23 Dec 2020disclosed
Summary
Improper authorization could potentially allow an attacker to bypass SMS verification and delete a TikTok account. This attack would first require the account to be compromised. A fix has been implemented to resolve this issue. We thank @luizviana for reporting this to our team and confirming the resolution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.